OpenCart Password Reset Expired extension, allows you to add a time constraint to admin and customer password reset link. This will invalidate the reset link at the end of the specified period.

The default OpenCart password reset link has no time limitation and is valid unless it is used. You can avoid this by using Password Reset Expired extension and the possibility of being used by someone else is eliminated when your customer does not use reset link that is requested.